General

  • Target

    707982306fed46413215d73186952a8b3bfded7822b1045d3707f1e9883b0465.exe

  • Size

    78KB

  • Sample

    241201-pfpz9a1lgv

  • MD5

    9962927752e377c54ed74bee9d3d4242

  • SHA1

    92b1bfe41fb3e7e9bcd399400017c2421338a4de

  • SHA256

    707982306fed46413215d73186952a8b3bfded7822b1045d3707f1e9883b0465

  • SHA512

    371f9f73713eaa3ff8a5f308eb0268ceafc7e6ae55a3e7268bf556cb5bbedfc907875c9734c0f34012303cb829aeff597b06edb3072fb01a5cb03b19490471ce

  • SSDEEP

    1536:NStHF3uaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtL19/uw1HzH:NStHFP3DJywQjDgTLopLwdCFJzL19/hH

Malware Config

Targets

    • Target

      707982306fed46413215d73186952a8b3bfded7822b1045d3707f1e9883b0465.exe

    • Size

      78KB

    • MD5

      9962927752e377c54ed74bee9d3d4242

    • SHA1

      92b1bfe41fb3e7e9bcd399400017c2421338a4de

    • SHA256

      707982306fed46413215d73186952a8b3bfded7822b1045d3707f1e9883b0465

    • SHA512

      371f9f73713eaa3ff8a5f308eb0268ceafc7e6ae55a3e7268bf556cb5bbedfc907875c9734c0f34012303cb829aeff597b06edb3072fb01a5cb03b19490471ce

    • SSDEEP

      1536:NStHF3uaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtL19/uw1HzH:NStHFP3DJywQjDgTLopLwdCFJzL19/hH

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Metamorpherrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks